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Programmable logic device e.g. FPGA comprises voltage level shift 
circuit for connecting either battery pad or external power supply to key 
memory registers 

Patent Assignee: XILINX INC (XILI-N) 

Inventor: ALFKE P H; FRAKE S O; GOETTING F E; KONDAPALLI V M; PANG R C; 
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Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date) : US 2000724735 A 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 6441641 Bl 28 H01L-025/00 




Abstract (Basic) : US 6441641 Bl 

NOVELTY - A switching circuit (22) comprises a voltage level shift 
circuit for connecting either a battery pad or an external power supply 
to the memory registers (23b) storing encryption key* . 

USE - Programmable logic device e.g. field programmable gate 
array (FPGA) . 

ADVANTAGE - Prevents data loss and protects from unauthorized use, 
by eliminating the need of non-volatile memory and providing backup 
power supply . 

DESCRIPTION OF DRAWING (S) - The figure shows the structure of the 
key memory. 

Switching circuit (22) 
Memory registers (23b) 
pp; 28 DwgNo 10a/16 
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Key generation device e.g. for elliptical curvilinear encryption, chooses 
key generation system based on key selection limit, maximum key bit 
length and time for calculation- specified by user for generating the 
key 

Patent Assignee: TOSHIBA KK (TOKE ) 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 
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Abstract (Basic) : JP 2002207425 A 

NOVELTY - The key generation device has a choice unit to choose a 
key generation system based on key selection limit, maximum key bit 
length and time duration for calculation specified by a user. The key 
is generated by a key generation unit based on the choice result. 

DETAILED -DESCRIPTION - INDEPENDENT CLAIMS are included for the . 
following : 

(1) Key generation method; and 

(2) Public-key encryption program. 

USE - For public key encryptions such as elliptical curvilinear 
encryption, RSA-cipher. 

ADVANTAGE - Formation of public key pair of public key encryption 
is enabled easily and reliably. 

DESCRIPTION OF DRAWING (S^,- The figure is the block diagram showing 
the structure of the key generation device. 
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Educational toy has plate with questions and answers and guide openings 
and has key that is fitted into?' answer, with arrangement of marks to 
determine if answer is correct 

Patent Assignee: LOEWE VERLAG GMBH (LOEW-N) 

Inventor: GONDROM V 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 
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Abstract (Basic) : DE 10031546 CI 

NOVELTY - The toy has at least one plate (1) with a front side 
having a question (4) and several answers (5-7), a back side (3) and 
several guide openings (8-10) , each with a different visible mark. A 
key with a bit fits in the front side of each guide opening and 
projects through the back plate, so that a mark on the bit lies next 
to the mark on the plate. £5. 

DETAILED DESCRIPTION - A key has a bit, which can be fitted in the 
front side of each guide opening and projects through the back plate by 
a section, which is a different side for each opening. The key bit 
has a mark corresponding to the marks on the plate. When the key is 
inserted in an opening, the projecting section lies next to a mark, 
which is different for each opening that the key can be inserted into. 
The marks only match properly, if the key is inserted into the guide 
opening with the correct opening. 

USE - Educational use. 

ADVANTAGE - Expensive correction device is not required. 
DESCRIPTION OF DRAWING (S) - The figure shows a schematic view of 
the front side of a plate of the toy. 
Plate (1) 



Front side (2) 
Question field (4) 
Answer fields (5-7) 
Guide openings (8-10) 
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Programmable logic device e.g. field programmable gate array, has 
configuration logic whose input and output terminals are connected to 
decryptor output terminal and array respectively to receive configuration 
data 
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Number of Countries: 021 Number of Patents: 006 
Patent Family: 
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Abstract (Basic) : WO 200049717 A2 

NOVELTY - A decryptor (350) decrypts the encrypted configuration 
data received through input terminal, for accessing decryption key 
stored in RAM (310) through other input terminal and outputs the 
decrypted data to output terminal connected to input of configuration 
logic (305) . Output of configuration logic is coupled to array (315) 
which is configured based on configuration data received by 
configuration logic. 

DETAILED DESCRIPTION - The logic device comprises hash-function 
logic for authenticating portion of decryptor. A non-volatile memory 



element is coupled to hash-function logic to store hash key and 
encryption key . INDEPENDENT CLAIMS are also included for the 
following: 

(a) configuration data protecting system; . , , 

(b) programmable logic device configuring method 

USE - In e.g. field programmable gate array (FPGA) using encrypted 
configuration data. 

ADVANTAGE - The configuration data are used to instantiate the 
decryptor, for overcoming the security breach and only configuration 
data of decryptor produces the desired hash result that has access to 
decryption key which cannot be operated by unknown person, thus 
protecting data from theft. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
FPGA. 

Configuration logic (305) 
RAM (310) 
Array (315) 
Decryptor (350) 
pp; 23 DwgNo 3/6 
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Key cutting machine for cutting defined bit notch pattern in key blank - 
has mode control operating machine in either analog mode where blank is 
cut by following pattern of master key, or mode where digital data 
signal is used to replicate key pattern 

Patent Assignee: AXXESS TECHNOLOGIES INC (AXXE-N) 

Inventor: CARLSON B D; HEREDIA G L; MUELLER M A 

Number of Countries: 008 Number of Patents: 010 
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JP 3001444 B2 20 B23C-003/35 Previous Publ . patent JP 9216112 
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Designated States (Regional): DE FR GB IT 
DE 69624547 E B23C-003/35 Based on patent EP 779120 

Abstract (Basic) : EP 779120 A 

The key cutting machine (10) includes a cutter wheel and a key 
follower spaced for it. A mode control system selectively configures 
machine to operate in either analog mode or digital mode. In analog 
mode key follower engages master key bit notch pattern and 
displaces cutter wheel and key blank to mechanically trace and 
duplicate master key pattern in blank. 

In a digital mode, a cutter wheel is displaced relative to the 
blank in response to digital data signal as cutter wheel and blank are 
moved relative to each other to electronically duplicate defined 
pattern in blank blade without reference to master pattern. 

Dwg . 1A/ 36 
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Electromagnetically operated security lock esp. for safe-deposit doors - 
includes slotted tumblers engaged by fixed pin on sliding bolt for 
two -stage switching of electromagnet during unlocking by proper key 

Patent Assignee: STEINBACH & VOLLMANN (STEI-N) 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date AppJ&cat No Kind Date Week 
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Patent Details: 
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DE 4420747 CI 11 E05B-047/06 

Abstract (Basic) : DE 4420747 C 

The bolt (2) incorporates a slot (2b) where it can be retracted by 
means of a key (S) subject to correct positioning of tumblers (3,3*)/ 
pivotable about a spike (4) on the floor (la) of the casing (1) and 
co-operating with a fixed pin (2c) . . ■ . . . 

The bolt is also secured by a pref . battery-powered electromagnet 
(5) provided with two microswitches (7a, 7b) to reduce its current 
consumption. The first microswitch (7a) is closed by a lever (9) 
operated by a key bit at the beginning of rotation of the key . 
Further rotation opens the second microswitch (7b) after the pin has 
entered the slots (3b) in the tumblers. 

ADVANTAGE - The current required for unlocking is reduced 
substantially by simple' and Inexpensive switching with complete 
security. 

Dwg. 1/9 
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Number-plate-f ixing device inside plastics guard - comprises keys 
inserted and turned in keyholes in baseplate 
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Abstract (Basic) : EP 534315 A 

The fixing device secures a numberplate inside a plastics 
reinforcing guard. The latter comprises a baseplate (2) with standard 
fixing holes as used for a vehicle, and a peripheral channel-section 
edge (3) with a deeper rib (4) fitting over the numberplate edge. Along 
one side, the edge is wider than elsewhere, forming a detachable 
covering strip over fixing devices . 

The baseplate contains openings (6) with keyholes (7) for keys (8) 
bent over on the baseplate. Each key has a flat oval head (9) with an 
eccentric shank (10) on one side. On the end of the shank are one or 
more tongues (11), it being inserted and turned in the keyhole. Ribs 
(12) on the underside of the covering strip (5) then lock the head in 
the engaged position. 

USE/ADVANTAGE - Rapid, easy and sure fixing of numberplate so that 
it will not rattle. 
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Abstract (Basic) : DE 3632663 A 

The safety lock with either side-lockable double cylinders consists 
of outside cylinder assembly (1) with drop locking pins, inside 
cylinder assembly (3) with drop locking pins (2), limiting disc (4) 
engaging with grooves provided in the cylinders, further key bit 
assembly (5) mounted between the outside cylinder and the inside 
cylinder. All the above assemblies are accommodated in housing (10) . 

The key bit has bore in which sliding blocks (6,6a) are mounted 
with key-accepting slots. The two blocks are kept apart by spring (8). 

ADVANTAGE - The mechanism allows operation of one cylinder without 
interference from the other cylinder. This operation can be carried out 
even if the key is left in the "lock on either side of "the mechanism'. 
(6pp Dwg.No2/9 
Derwent Class: Q47 

International Patent Class (Main) : E05B-009/10 
International Patent Class (Additional) : E05B-027/00 
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Key operated coded lock - has two-part core with spring-loaded locking 

pins in one part and main key hole in other part 
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Abstract (Basic) : SU 1002489 A 

The lock has housing (1), core (2), crosspiece (3), key (4) and 
lower (5) and upper (6) locking pins. Crosspiece (3) engages with 
pinions (7), and limiters are secured to pins (6) and interact with 
guide pinions mounted on shaft (10) . These limiters have false grooves 
(11), working grooves and teeth (13) which engage with number discs 



(14). Disc (14) are mounted on shaft (15) and have teeth (16) and 
spring (17). The discs are brought into motion by spring-loaded forks. 
The forks 

have wedges (21) mounted on a strut. Wedges (21) can interact via 
bit (23) with additional key (24). Core (2) consists of housing 

(25) and segmented section (26) . Main key (4) is formed by rod (28) of 
a guide in which the key bit , consisting of plates (30), is 
installed. Plate spring (31) is hinged to rod (28). To replace core (2) 
there is cap (32) and wedge guide (33), and the limiters have stops 

(34) . 

The lock .can be used for doors and safes, and it has a numerical 
code and a code provided by main key (4) . The code is set with key (4) 
and by turning key (24) to free numerical discs (14) . The number of 
operations for unlocking is minimal and the lock has increased secrecy. 
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..SPECIFICATION a binary ZERO to be written into lock bit position LMB0 of 
the first memory block as indicated by block 606 of Figure 6a. As 
indicated in block 608 of Figure 6a, the execution of each step 
instruction causes a next bit of the key value stored in ACP 10 memory 
to be written into the next lock bit location (e.g. LMB1) of the first 
block. If there are more key bits to be written into the lock bit 
positions of the first block, ACP 10 causes the execution of another step 



instruction. Step instructions are executed until the ACP 10 determines 
that all of the bits of the stored key value have been written into the 
lock bit positions of lock memory area for the first memory block. The 
ACP 10 makes the determination by detecting that 7 consecutive ONES 
have occurred signaling the end of the key value. 
As indicated. . . 
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ABSTRACT EP 536943 A2 

A data security arrangement is provided to protect configuration data 
to be stored in static random access memories (38) in semiconductor 
programmable logic devices PLD. The configuration data, which is 
vulnerable to illegal duplication, is normally held in a read only memory 
ROM, typically an erasable programmable read only memory. 

A data coding means is provided to code the configuration data to be 
loaded to the PLD and a data decoding means is provided. in the PLD to. 
decode the coded configuration data. The coding and decoding means each 
incorporate maximal length shift registers (12, 25) which generate a 
pseudo-random sequence of bits. A key value is input to the shift 
register (12) in the coding means forcing it to start at a particular 
point in the sequence. The output (bits B28 and B31) of this register is 
combined in an EXCLUSIVE-OR gate (20) with configuration data and coded 
data is written to the read only memory ROM (24) . The decoding means in 
the PLD has a corresponding ke^ value held in a non-volatile memory (2 8) 
in the PLD. This is applied to the register (25) of the decoding means 
whose output (bits B28 and B31) are combined in an EXCLUSIVE-OR GATE (34) 
with coded configuration data CDIC read from the ROM (24) to produce 
decoded configuration data CDOD to be sotred in the memories (38) . (see 
image in original document) 
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...CLAIMS volatile storage means is constituted by static random access 
memories (38) . , 
14. A method of configuring a programmable logic device that 

includes a semiconductor device having (1) configurable circuitry, 
(2) an input circuitry (35) for receiving data... 

...3) decrypting circuitry (25, 29, 34) connected to said input circuitry 

(35), (4) a non-volatile data storage device (28) connected to said 
decrypting circuitry (35), and (5) volatile storage circuitry (38), 
which method comprises encrypting configuration data by use of an 
encryption key value, storing said configuration data in said data 
store (24) after encryption, inputting encrypted data from said data 
store to said programmable logic device , deriving a decryption 
key value from said non- volatile store (28) in said programmable 
logic device , said decryption key value being the same as said 
encryption key value, decrypting said encrypted data by use of 
said decrypting key value, storing said data after decryption in said 
volatile storage circuitry (38) in said programmable logic 
device and configuring said programmable logic device 
according to decrypted data in said volatile storage circuitry. 
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ABSTRACT EP 2 84799 A2 

A television transmission system replaces the standard FM audio portion 
of a television signal with digital audio. Three digital audio channels 
are time division multiplexed ok the sound carrier, using combined 
multi-phase and AM modulation. The audio signals are digitized using 
adaptive delta modulation techniques. Video vertical and horizontal 
framing, as well as the audio carrier phase reference, audio data bit 
time and frame reference, and various control data is carried using AM 
modulation. The digital audio information is carried using multi-phase 
modulation. The composite data stream may be serially encrypted to 
provide security and prevent unauthorized reproduction of the video 
and/or audio portions of the television signal. 

ABSTRACT WORD COUNT: 112 



LEGAL STATUS (Type, Pub Date, Kind, Text) : 

Published application (Alwit 
;A2without Search Report) 
Obligatory supplementary clc 
(change) 

Separate publication of the 
International search report 
Date of filing of request fc 
900213 

Date : $bf despatch of first e> 
920302 



Application : 


• 881005 


A2 


Change : 


890802 


A2 


Search Report: 


890920 


A3 


Examination : 


900411 


A2 


Examination : 


920415 


A2 


Grant : 
Oppn None : 


930721 
940713 


Bl 
Bl 



LANGUAGE (Publication, Procedural, Application) 
FULLTEXT AVAILABILITY: 



English; English; English 



Available Text 
CLAIMS B 
CLAIMS B 
CLAIMS B 
SPEC B 



Language Update Word Count 

(English) EPBBF1 1688 

(German) EPBBF1 1779 

(French) EPBBF1 2452 

(English) EPBBF1 9939 

Total word count - document A 0 

Total word count '- document B 15858 

Total word count - documents A + B 15858 



...SPECIFICATION amplitude or frequency companding data, and the contents 
of sequential lines alternate from one line to the next . 

Bits 16-23 of the tag data carry data associated with the digital audio 
program, and is... 



^.decryption key prior to evaluation. The two bytes are broken down into 
four nibbles, each specifically the appropriate key nibble to be used 
in the associated key section. Table 6 indicates the correspondence 
between the key usage identifier nibbles and the key nibbles. (see image 
in original document) 

This scheme allows any key nibble to be used in any section of the key 
latch. #• 
Another byte of data is... 
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English Abstract 

To prevent copying of a design implemented in a programmable logic 
device ( PLD ) , the PLD itself stores a decryption key or keys loaded 
by the designer, and includes a decryptor for decrypting an encrypted 
configuration bitstream as it is loaded into the PLD . The PLD also 
includes logic for reading header information that indicates whether the 
bitstream is encrypted, and can accept both encrypted and unencrypted 
bitstreams. The encryption keys may be stored in non-volatile 
memory or backed up with a battery so that they are retained when power 
is removed. 

French Abstract 

L' invention concerne un procede permettant d'empecher de copier une 
conception implantee dans une unite logique programmable <ULP) , selon 
lequel l'ULP elle-meme stocke une ou plusieurs cles de decryptage 
chargees par le concepteur, et comprend un decrypteur servant a decrypter 
un flux binaire de configuration crypte alors qu'il est charge dans 
l'ULP. Cette derniere comprend egalement une logique servant a lire des 
informations d'en-tete indiquant si le flux binaire est crypte, et peut 
accepter des flux binaires cryptes et non cryptes . Les cles de cryptage 
peuvent etre stockees dans une memoire non volatile ou sauvegardees au 
moyen d'une batterie, de facon$a etre conservees lorsque 1 1 alimentation 
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English Abstract 

To prevent copying, of a design implemented in a programmable logic 
device ( PLD ) / the PLD itself stores a decryption key or keys loaded 
by the designer, and includes a decryptor for decrypting an encrypted 
configuration bitstream as it is loaded into the PLD . „The PLD also 
includes logic for reading header information that indicates whether the 
bitstream is encrypted, and can accept both encrypted and unencrypted 
bitstreams. The encryption keys may be stored in non-volatile 
memory or backed up with a battery so that they are retained when power 



Detailed Description 

determine the value of the ^y. The well-known Data 
Encryption Standard DES used a '56-bit encryption key / and has 
been' broken in a few hours by a sophisticated computer to reveal the key. 
DES. . . 

. . . resides in the 

key. When the encryption method is symmetrical, the same keys used for 
encryption are stored in the PLD and used in reverse order for 
decryption . 

In a PLD offering multiple keys, if the number of. . . 
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English Abstract v * 

It is sometimes desirable to protect a design used in a PLD from being 
copied. If the design is stored in a diferent device from the PLD and 
read into the PLD through a bitstream, the design may be encrypted as it 
is read into the PLD and decrypted within the PLD before being loaded 
into configuration memory cells for configuring the PLD. According to the 
invention, in such a device, a method is provided to prevent the design 
from being read back from the PLD in its decrypted state if it had been 
encrypted when loaded into the PLD. 

French Abstract 

II est parfois souhaitable de proteger une conception utilisee dans une 
ULP (unite logique programmable) contre les copies. Si la* conception est 
stockee dans un dispositif different de l'ULP et memorisee dans l'ULP a 
travers un flux binaire, la conception peut etre cryptee alors qu'elle 
est memorisee dans l'ULP et decryptee a l ! interieur de cette derniere 
avant d'etre chargee dans des cellules de memoire de configuration pour 
configurer l'ULP. L' invention concerne un procede permettant d'empecher 
que la conception soit recopiee de l'ULP dans son etat decrypte si elle a 
ete cryptee lors de son chargement dans l'ULP. 

w. 
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. . . rather than using nonvolatile memory to preserve keys, the invention 
preferably uses a battery connected to the PLD to preserve 
the key when power is removed from the PLD . Whereas it is possible to 
remove a pld storing keys in nonvolatile memory, decap the PLD and 
observe 
3 

which of the nonvolatile bits are programmed to logic 1 ...logic 0, it 
is believed that it is very dirricult to detern-dne the 

contents of keys stored only in static memory cells since power must be 
maintained to the memory cells storing the keys in order for the keys to 
even 

be stored , and the PLD would have to be decapped, delayered, and 
probed 

while operating power is continuous to the PLD . , 

W ! qys an attacker can steal a desigLi once loaded into a PLD 

If a key does not offer sufficient security,, an attacker may break the 

encryption code and determine the value of the key. The well-known Data 

Encryption Standard DES used a 56-bit encryption key , and has been 

broken in a few hours by a sophisticated computer to reveal the key. DES 



.resides in the 

key. When the encryption method is symmetrical, the same keys used for 
encryption are stored in the PLD and used in reverse order for 
decryption . 



In a PLD offering multiple keys, if the number of. 
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English Abstract 

System, method, signal, operating model, and computer program for 
electronic messaging. Systems and method for providing security for 
communication of electronic messages, interactive sessions, software 
downloads, software upgrades-, and other content from" a source to a 
receiving device as well as signals used for such communications (304, 
309, 308, 324, 342, 338, 334, 330, 326). Systems, methods, signals, 
device architectures, data formats, and computer program structures for 
providing authentication, integrity, confidentiality, non-repudiation, 
replay protection, and other security properties while minimizing the 
network (306) bandwidth, computational resources and manual user 
interactions (314) required to install, enable, deploy and utilize these 
security properties. System, device, method, computer program, and 
computer program product for searching and sleeting data and control 
elements in message procedural/data sets for automatic and complete 
portrayal of message to maintain message intent. 



French Abstract 

Systeme, procede, signal, modele operatoire et programme d'ordinateur 
pour messagerie electronique . ^stemes et procede permettant de securiser 
la communication de donnees de messages electroniques , sessions 
interactives , telechargements de logiciels, mises a jour de logiciels et 
autres contenus d'une source a un appareil recepteur ; signaux utilises 
pour ce type de communication (304, 309, 308, 324, 342, 338, 334, 330, 
326). Systemes, procedes, signaux, architectures d ! appareils, formats de 
donnees et structures de programmes d'ordinateur assurant 
1 ' authentif ication, l'integrite, la conf identialite, la non-repudiation, 
la protection contre la reinsertion ainsi que d' autres proprietes de 
securite tout en reduisant la bande passante du reseau (306), ressources 
informatiques et interactions manuelles de 1 ' utilisateur (314) requises 
pour 1 1 installation, 1 1 activation, le deploiement et 1 'utilisation de ces 
proprietes de securite. Systeme, appareil, procede, programme 
d'ordinateur et produit programme d ! ordinateur permettant de rechercher 
et de selectionner des elements de donnee et de commande dans des 
procedures relatives aux messages et des ensembles de donnees pour 
obtenir une representation automatique et complete du message et 
preserver 1 1 intention du message. 
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with a trusted public key) or cryptographic checksum (verified with a 
trusted key derived from a Master Key or Session Key or Message Key) . 

For example, the trusted storage means can be data from a... 

...which -case, -the-Mercha@nt-will 1 auth-enticate*the Clientbased on this 
Resource Tag. The Client's keys and certificate chain can be unique to 
this client, and the Merchant can authenticate the Client using... the 
Client based on this Resource Tag- (261) The method in embodiment (252) , 
wherein the Client's keys ana certificate chain are unique to this 
client, and the Entity authenticates the Client using this unique... 
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English Abstract 

A system (250) .loads, authenticates and uses a virtual smart card for. 
payment of goods and/or services purchased on-line over the Internet. An 
online purchase and load (OPAL) server (260) includes a virtual smart 
card data base (270) that has a record of information for each smart card 
that it represents for a user at the behest of an issuer. The server 
includes a smart card emulator (2 66) that emulates a smart card by using 
the card data base and a hardware security module (268). The emulator 
interacts with a pseudo card reader module (264) in the server that 
imitates a physical card readea^ The server (260) also includes a client 
code module (224) that interacts with the pseudo card reader and a remote 
payment (206) or load server (862). A pass-through client terminal (204) 
presents a user interface and passes information between the OPAL server 
and a merchant server (208), and between the OPAL server and a bank 
server (860). The Internet (202) provides the routing functionality 
between the client terminal and the various servers. A merchant 
advertises goods on a web site (208) . A user uses the client terminal 
(204) to purchase goods and/or services from the remote merchant server 
(208). The payment ■ server (206) processes, confirms and replies to the 
merchant server. The payment server is also used to authenticate (206 1 ) 
the holder of a virtual card who wishes to redeem loyalty points from a 
merchant. To lo r ad value, the. client terminal requests a, load from a user , 
account at the bank server (860) . The load server (862) processes, 
confirms and replies to the bank server. 

French Abstract 

L* invention concerne un systeme (250) qui permet de charger, 
d 1 authentif ier et d'utiliser une carte a puce virtuelle pour le paiement 
de biens et/ou de services achetes en ligne par le biais d 1 Internet. Un 
serveur (260) d' achat et de enlargement en ligne (OPAL) comprend notamment 
une base de donnees de cartes a puce virtuelles (270) qui stocke des 
informations relatives a chaque carte a puce virtuelle qu'elle represente 
pour un utilisateur a la demande d'un emetteur. Le serveur comprend un 
emulateur de carte a puce (266) qui emule une carte a puce au moyen de la 
base de donnees de cartes et un module de securite du materiel (268) . 
L' emulateur interagit avec un pseudo module de lecteur de cartes (264) 
qui imite, dans le serveur, un lecteur de cartes physique. Le serveur 
(260) comprend egalement un module de code client (224) qui interagit 
avec le pseudo lecteur de cartes et un serveur de paiement (206) ou de 
chargement (862) a distance. Un terminal client (204) presente une 
interface utilisateur et fait passer les informations entre le serveur 
OPAL et le seryeur commercial (208), et entre le serveur OPAL et un 



serveur bancaire (860). L' Internet (202) assure les fonctions 
d 1 acheminement entre le terminal client et les differents serveurs. Le 
commercant fait connaitre ses produits sur un site web (208) . Le 
consommateur utilise le terminal client (204) pour acheter des biens 
et/ou des services aupres du serveur commercial a distance (208) . Le 
serveur de paiement (206) , apres traitement, confirme et repond au 
serveur commercial. Le serveur de paiement sert egalemerit'a authentifier 
(206 1 ) le detenteur d'une carte virtuelle qui desire encaisser des points 
de fidelite aupres du commercant. Pour charger la valeur, le terminal 
client demande un chargement a partir d'un compte utilisateur aupres du 
serveur bancaire (860). Le serveur de chargement (862), apres traitement, 
confirme et repond au serveur bancaire. 
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generating a virtual card signature S3 may still occur. In the 

alternative embodiment in which points are stored in card data base 

270, the points needed to redeem the benefit chosen by the consumer from 



...access to a privileged service for the benefit requested. In the 
alternative embodiment in which points are stored in card data base 
270, the Authentication Result message serves not only as an 
authentication of the ... implemented as a security card described above or 
similar to HSM 268 above. HSM 8%4 contains the encryption keys used 
for generating signatures (for example S 1, S2 and S3) that provide 
security for the transaction ... and, in general, to provide for a valid 
transaction and to prevent fraud. HSM 268 also includes encryption 
keys for the generation of a virtual card signature. In an alternative 
embodiment, HSM 864 could be replaced. . . 

...that includes a security card such as is shown in the previous 

embodiments. In this situation, the encryption keys would be stored 
in the security card. Briefly, system 850 operates as follows. A consumer 
accesses bank server 860 using... of subsystems. Processor(s) 922 (also 
referred to as central processing units, or CPUs) are coupled to storage 
devices ' including 

memory 924. Memory 924 includes random access memory (RAM) and read-only 
memory (ROM) . As . . . 

...below. A fixed disk 926 is also coupled bi-directionally to CPU 922; it 
provides additional data storage capacity and may also include any of 
the computer-readable media described below. Fixed disk 926 may be used 
to store programs, data and the like and is typically a secondary 
storage medium (such as a harcrdisk) that is slower than primary 
storage . It will be appreciated that the information retained within 
fixed disk 926, may, in appropriate cases, be... shares a portion of the 
processing. In addition, embodiments of the present invention further 
relate to computer storage products with a computer-readable medium 
that have computer code thereon for performing various 
computer-implemented operations . . . 

...that are specially configured to store and execute program code, such as 
application-specific integrated circuits (ASICs), 

programmable logic devices (PLDs) and ROM and RAM devices. Examples 
of 

computer code include machine code, such as pr 



oduced. 
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English Abstract 

A method and apparatus for a home monitoring system is provided. The home 
monitoring system may include a command console (10) for monitoring and 
processing the output of sensors (14, 16, 18, 20, 22, 24). The processing 
of the sensors (14, 16, 18, 20, 22, 24) includes (1) providing a history 
of the sensor as an indicator to the operator of the sensor output over 
time; (2) analyzing the trends of the sensor to increase the 
effectiveness of the sensor beyond simply the current sensor output; and 
(3) analyzing the output of one sensor which may impact interpretation of 
a second sensor's output. The monitoring system may also be a 
prescription reminder system. The prescription reminder system may be 
used in homes or institutional medical facilities (assisted living or 
nursing homes) to provide patients with a manner to remind them to take 
pharmaceutical drugs at prescribed times. 

French Abstract 

II s'agit d'un procede et d'un dispositif utilises pour un systeme 
domotique. Ce systeme domotique peut comprendre une console de commande 
(10) pour controler et traiter les sorties de capteurs (14, 16, 18 20, 
22, 24). Le traitement des capteurs (14, 16, 18, 20, 22, 24) vise a (1) 
fournir un historique du capteur qui servira d'indicateur a l'operateur 
sur les sorties du capteur au fil du temps; (2) analyser les tendances du 
capteur pour ameliorer son efficacite au-dela des seules sorties du 
capteur courant; et (3) analyser les sorties d ! un capteur susceptibles 
d' avoir une incidence sur 1 1 interpretation des sorties d'un deuxieme 
capteur. Le systeme de surveillance peut egalement servir d 1 aide-memoire 
pharmaceutique.' Cet aide-memoire "pharmaceutique peut ' et're" utilise dans 



des centres ou des etablissements de soins (maisons de retraite ou 
maisons de repos) et servir aux patients pour les avertir aux heures 
prescrites de prise des medicaments 
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Claim 

t'n.-s menu, which is to ARI^.or DISARM the nurgiar alarm. If ARMED 
then the next state will be to set if the burglar is to determine 
whether the alarm is HOME or AWAY. Each burglar sensor wi-- n be either 
a HOME or a . . . 

...burglar disabled, then if user is MASTER, then goto system 
configuration; otherwise goto main loop (monitor) . 

return: next main menu state 
unsigned int BurglarAlarm ( void 
LCDcls 

LCDprintf MsgTable MSG 
BURGLAR-ALARM 

1 - - 

LCDprintf MsgTable MSG... 
...return ( MAX-UserMenuSize 
I /* end switch (cUserMode) 

This module is part of the main menuing system. This determines if 
the 

burglar sensor alarming is set for HOME or AWAY. See the ARM and DISARM 
routines for more details. Next state is Either configuration for 

MASTER or main loop for anyon#.else. 

return: next main menu state 

unsigned int BurglarAlarmHA ( void 

LCDcls /* Burglar system HOME/AWAY? 

LCDprintf MsgTable MSG 

BURGLAR 

ALARM. . . 

. . . flag 

GetKey KeyMENU /* ACK 
break 

case KeyMENU: 

break ; /* do nothing here . ■ . 

/* end of switch ( cKeyValue) 

switch ( cUserMode ) /* determine next state 
case GOD: 

return ( CONFIG-SYS /* if god, goto conf system 
default : 

cUserMode = MONITOR MODE 
; /* anyth4na else... 

#. 

...of the area before the system will active the alarm and consider that 
person a burglar 

return: next configuration menu state 
unsigned int BurglarTimeout ( void 
if BurglarCount 0 
if bBurglarTO BURGLAR- 90 SEC 
LCDcls /* tell user... 

. . .break ; 

/* end switch (cKeyValue) 

/* end if (bBurglarTO BURGLAR- 4 5SEC 

/* end if ( BurglarCount 0 .... 
return MENU- BURGLAR SO /* return next state 



/* change to burglar timeout of 45 seconds 
void Burglar45Sec ( void 
bBurglarTO BURGLAR- 4 5 S EC ; /* set flag 
LCDcls . . . 

.user whether to turn the noisy stuff feature on or .off,. then set a bit . 
variable to indicate such, --his subroutine is executed as a state from 
the menu-s state machine. It does not... final number. If an invalid call 

forwarding number is in the system X f s are shown 

return: next configuration state 
unsigned int CallForward ( void 
unsigned char i 

TestlnitCallF ( ) ; /- check call forwarding number 
LCDcls ( ) ; /* ask user... ^ 

.temp to current C.F. 

uspdirty = 1 ; /* flag to write flash 

newcfn 1 

break 

case KeyNO: 

/* return next state to end, reenter Call Forward Number 
return ( MENU CALL -FORWARD 
case KeyMENU: 

LCDcls ( ) ; /* they canceled, so keep... 

. KeYMEN.U ) .; /* ack */ . ... 

case KeyMENU: /* do nothing, cancel 
break ; 

/* end of switch ( cKeyValue) 

return ( MENU-TEST-LOCAL return next state 

This routine will take the temporary call forwarding array, which has 
been copied from the current... 

. count ^ 

for count = 0 count < LIMIT- CALLFORWARD count@+ 

user-space . us cfwd count 0x30 

uspdirty 

This routine determines if the call forwarding number is valid, if it 

is 

valid then the routine will call a... 



.Flow of the menus can be changed very easily with changing enumeration 
and * changing a pointer to next menu structure. 
#include "gen 
def .h" 

unsigned int ( ,*fptrCFG [ MAX . ... 

ConfigStates I void 

static unsigned int cConfigState .. .whether we want tone/pulse, etc. This 
state rnac'@-,ne works by passing the address of the next , function to 
call, then simply using 

that address as a pointer call prototyped function 

return: next state of Menu system 
unsigned in7 ConfigMENU void 
cConfigState = 0 ini r4 a-, s-^e 
while . . . 



.of the configuration menu and will configure whether yqu are connected 
to the NCSC or not. 

return: Next configuration state 
unsigned int ConnectOptions ( void 

go to either Reconnect or Disconnect 

the default is DISCONNECTED from... 

.Key YES: 

Disconnect /* Disconnect NCSC service 

break , 

/* end if(user 

space. us-flg & USFDISC) 



return ( MENU-SW-VER /* next state 

/* this will disconnect the Command consoi-e from the NCSC 
void Disconnect ( void 
user-space. us. . . 

.0x39 ) ; 

GetKey KeyMENU /* wait for ACK 

This routine is part of the configuration Menuing system and will 
determine if the modem will dial direct or it will dial 9 before 
dialing the number. 

return: next configuration menu state 
unsigned int DialType ( void 
if rdosl 0 * 
LCDcls display Direct diall set 

LCDprintf MsgTable ... Press Each Key /* MSG-TEST- LOCAL- 6B 

(11 Set Date? /* MSG 

DATE 

P Registration /* MSG- REG 

i" Succeeded <MENU>"), /* MSG- SUCCEED 
P Sound On <Y> MSG SOUND ON 1 Y 
P Sound Off <N> /* MSG SOUND OFF N 
Silent. . . 

. .DIAL-9, 
MSG- DIAL-DIRECT, 
MSG PROMPT, 
MSG-ADD 
SENSOR, 
MSG-POSITTON 
SENSOR, 

MSG-TEST-SENSOR, 
MSG- MORE -SENSORS, 
MSG-SENSOR-ADDED, 
MSG-SENSOR-NOT -ADDED, 
MSG- S EN SOR- ARRAY- FULL , 
MSG-CANNOT-ADD-ANYMORE-SENSORS . . . 

. . MSG-TEST-LOCAL- 5A, 
MSG-TEST-LOCAL- 5B, 
MSG-TEST-LOCAL- 6B, 
MSG-DATE, 
MSG-REG, 
MSG- SUCCEED , 
MSG-SOUND-ON-Y, 

MSG-SOUND-OFF-N, ' " 

MSG-SILENT-ON-Y, 

MSG-SILENT-OFF-N, 

MSG. . . 

. . IS DISCONNECTED 

THESE EQUATES DEFINE THE FLAG BITS IN THE SENSOR ARRAY FLAGS FIELD. 
THE PRESENT BIT INDICATES THAT THIS SENSOR ENTRY IN IN USE. IT IS 



. SNFPRES EQU 01H 1 IF SENSOR PRESENT 

; THIS BIT IS SET BY THE RF RECEIVE HANDLER TO INDICATE THAT A MESSAGE 
WAS 

; RECEIVED FROM THIS SENSOR. IT IS CLEARED BY VARIOUS ROUTINE WHICH 
; POST PROCESS... S FOR THE LOW BATTERY CONDITION. IT IS CLEARED 
BY MONITOR WHEN A MESSAGE IS RECEIVED THAT INDICATES THE BATTERIES 
ARE OK. 

SNFLBA EQU 80H 1 IF LOW BAT MSG ACK-D 
; THESE BIT ARE. . . 



SET BY THE ADD SENSOR MENU 




..FORMAT OF A SENSOR STRUC. THIS IS ACTUALLY A SUBSTRUC OF* 
THE USER SPACE. IT CONTAINS SESNOR SPECIFIC INFORMATION. MAXSENSORS 
DEFINES THE NUMBER OF THESE STRUCS . THERE MUST BE AT LEAST ONE FOR EACH 



SENSOR. . . 
. . 1 DATA2 BYTE 
SEN- STAT EQU SEN-DATA2 + 1 STATUS BYTE 
SEN-NUHR EQU SEN-STAT+1 NEXT UPDATE TIME HR: 
SEN-NUMIN EQU SEN-NUHR+1 NEXT UPDATE TIME :MIN 
SEN-FLG2 EQU SEN-NUMIN+1 ANOTHER FLAGS BYTE 
SENSTRUCL EQU SEN- FLG2+1 ... WRITE LOOP 
PRLINE2: ; 
MOV i-0,#32 
PRLINELP: 

PUSH ARO SAVE LOOP CNT ^ 

MOVX A, @DPTR GET NEXT CHAR TO WRITE 

INC DPTR BUMP BUFFER PTR 

PUSH DPL SAVE PTR 

PUSH DPH 

MOV R7,A. . . 

. .TO CALL THE NCSC. 

MOV B, #SS-KEYGET READ THE KEYBOARD 
LCALL SYS SVC 

MOV A, R6 GET KEY BITS THAT COUNT 

JB ACC . 7 1 1 DKYMENU JUMP IF MENU KEY PRESSED 

ANL A, #7 OH. MASK ALARM KEYS .. . 

iz. . . LOW 500 

MOV B, #SS- DELAY 

LCALL syssvC 

POP ACC GET MASK BIT 

RL A SHIFT TO NEXT BIT 

MOV R7,A 

POP ARO GET LOOP COUNT 

DJNZ RO, RED1LP LOOP ^ 

MOV B, #SS-LCDCLS. . . 

. . LOW 500 
MOV B, #SS- DELAY 
LCALL SYSSVC 
POP ACC GET MASK BIT 
RL A SHIFT TO NEXT BIT 
MOV R7,A 

POP ARO GET LOOP COUNT 
DJNZ RO, GRN1LP LOOP 
MOV B, #SS-LCDCLS. . . 

. .TREAT AS NOT PRESENT 
INC RO YES DUMP BURGLAR COUNT 
BANOTP: ; 

MOV A, DPL BUMP DPTR 'O NEXT SENSOR ENTRY 

ADD A, #L07; ( SENSTRUCL- 1 ) ACCO ' , = 70R THE INC OF DPTR 

Mov DPL, A 

MOV. . .AN XOR OF ALL DATA FROM STX THRU ETX . 

THE INTERFACE TO THIS ROUTINE g£> VIA THE FOLLOWING SUBROUTINES AND 
DATA AREAS. FIRST, THERE IS SOME P 

UBLIC FIXED DATA SPACE IN XRAM. 
IOOBUF THIS... KEY WAS PRESSED 
EV-KEYMENU: ; 

mov B,#SS-KEYGET READ THE KEYBOARD 
LCALL SYSSVC 

mov AoR6 GET KEY BITS THAT COUNT 
mov C,ACC.7 GET THE MENU KEY BIT 
RET 

RETURN TRUE IF THE SENSOR ARRAY INDEX IS AT THE LAST SENSOR. 
EV-LAST.SENS : ; , ..... 
CLR C . . . NEWCONN CLEAR THE CONNECT/DISCONNECT CHGD 

NOW LOOOP THRU ALL SENSOR ENTRIES CLEARING THOSE FLAG BITS WHICH 

INDICATE A CONFIGURASTION CHANGE. 
MOV DPH, #HIGH USER- SPACE+US-SNS+SEN- FLAGS ; POINT TO 1ST SENSOR 



44L 



MOV. 



. . . LCD 

AC-LCDM1 : ; 

mov R7,#'F' TELL SUBR TO PRINT FAILED MSG 

CALL -PRREGMSG 

RET 

DISPLAY REGISTRATION SUCCEEDED MESSAGE ON THE LCD 
AC-LCDM2 : ; 

mov Rlrft'S 1 TELL SUBR TO PRINT RAILED MSG 
CALL -PRREGMSG. 

...THIS WILL CAUSE THE BOOT ROM CODE TO ASK FOR A DLL 
OF THE APPLICATION AFTER THE NEXT RESET, 
mov DPTR,#CLOBBER GET DATA TO CLOBBER WITH 

mov DPH1 , #HIGH BASEAPPL GET 1ST BYTE OF... OF THE USER SPACE. THIS WILL 

CAUSE THE DEFAULT USER SPACE VALUES TO 

BE LOADED AFTER THE NEXT RESET. 

MOV DPTR, #CLOBBER GET SOME GARBAGE DATA 

MOV DPH1,#HIGH FLASH SPACE+US SENT 

; GET FLASH. . . 

...simp s LOOP 1 @ 1 NT I L DOG BARKS .... 
ACRSPRET: 

RET BACK TO CALLER 

SET THE ALARM CALL BIT WHICH INDICATES WE MUST INFINITELY ATTEMPT 

TO MAKE THE CALL UNTIL WE GET THRU. 

AC 

SETALC: ; 
SETB ALCALL 

RET ... ^ 

...MARK USER SPACE DIRTY 
RET 

THIS ACTION SAVES THE CURRENT TIME IN RPINTIME TO BE USED TO DETERMINE 
WHEN WE MUST NEXT REPORT IN TO THE NCSC. IF THE SYSTEM IS CONFIGURED 
FOR MONTHLY CHECKIN, THE CURRENT MONTH & DAY. . . 

. . . FOR MONTHLY CHECKIN THE DAY 

IS TRUNCATED TO THE 28TH. THIS IS BECAUSE THE CHECKIN TIME IS DETERMINED 

CHECKING THAT THE RPINTIME MONTH & CURRENT MONTH ARE DIFFERENT, BUT THAT 
THE DAY IS THE SAME. THIS... ....... 

. . . SOME 

MONTHS DONT HAVE MORE THAN 28 DAYS. IF RPINTIME IS SET TO THE 3 1ST, AND 
THE NEXT MONTH DOESNT HAVE 31 DAYS, THERE WILL BE NO CHECKIN UNTIL A 
MONTH 

THAT HAS 31 DAYS . . . R M 

THE PURPOSE OF THIS SUBROUTINE IS TO COMPOSE THE COMMON FIELDS 
OF THE SEVERAL SENSOR SPECIFIC MESSAGES. WE WILL PUT THE SENSOR 
ARRAY INDEX, SENSOR TYPE & SER^L NUMBER INTO THE NCSC MSG BUFFER. . . 

. . .prompt for the user to enter a PIN number in the system and then call 
ReadPINStruct to determine if they entered the correct pin or not. If 
they did, they will be let into the. . . 

...is called from the MainPIN routine, this will read the PIN the user 
has entered, and then determine what access they have, if any. IT does 
this by setting the cUserMode, which can be set... 
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An efficient and scalable real-time information distribution system and 
method of operation thereof ar^ provided that build customized 
information collections according to individual preferences. This 
distribution system uses an information distribution network (130) such 
as the Internet for its communications infrastructure. Scalability and 
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French Abstract 

Cette invention concerne un systeme efficace de distribution de 
1 1 information, evolutif, en temps reel, et sa methode d ! exploitation qui 
permettent de creer des ensemb^s d 1 informations personnalises en 
fonction de preferences individuelles . Ce systeme de distribution repose 
sur un reseau de distribution de 1 1 information tel qu ' Internet pour son 
infrastructure de communications. Le systeme selon 1' invention peut 
atteindre un degre eleve d 1 evolutivite et d'efficacite en acheminant 
1 ' information via le reseau de distribution de 1 ' information (130). Les 
trains d ' information penetrent dans le reseau de distribution (130) par 
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creent des jeux de. fichiers de cle (keyples). Ces fichiers de cle sont 
ensuite transferes sur une serie de routeurs (160A-160D) . Ces routeurs 
preparent les fichiers de cles en fonction d'une serie de destinations, 
en les multiple,xant uniquement que vers les destinations qui demandent 
1 ' information . Une destination peut se presenter sous la forme soit d'un 
autre routeur de fichier de cles ou d'un dispositif de personnalisation 
de fichiers de cles. Ce dispositif de personnalisation attribue les 



fichiers de cle entrants a des collections, puis a un dispositif de 
realisation de collection. Un dispositif de realisation de collection 
cree a son tour des fichiers" de cles personnalises pour 'des utilisateurs ' 
individuels (150) . 
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ISO/& )-SOB 15c) 
TF 

bytes rsion Number 
4 bytes Feed ID 

4 bytes essagel'D yple * 

4 bytes Key ID (24 bytes) 

4 bytes Even 2S. 

4 bytes Timest 

?A 

2"70 

4 bytes version Number. . . 

. . .Customized 
4 bytes eyple 
4 bytes Bytes) 
4 bytes 
r2 

In a 

Memory 

Block 

The Version Number 

indicates the version of the 
Keyple being constructed. 
Insert Version 

Number * ... 

F-The Feed ID is a unique. . . 

...L numberof messages 

generated for a particular 
Feed that match a particular 
Key. 

Insert EventCount 

The Timestamp indicates the 

time the message originated 

in a standard format defined 

by eNuntio. 

Insert mes mp 

2c 

eyple Generated 
essage 

Each Message may have one or more 

Keys associated with it. In addition, a 
Wildca rd Key may be active which 

matches any Message from. .. Classification (IPC) or to both national 
classification 'and IPC ■ • ■, . 
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English Abstract / \ 

An initial note series (104) ils collected from a real-time source of' 
musical input material (101) s/uch as a keyboard or a sequencer playing 
back musical data, or extracted from musical data stored in memory (122). 
The initial note series may t/e altered to areate variations of the 
initial note series using various mathematical operations. The resulting 
altered note series (110), or other data stared in memory is read out 
according to one or more pa/cterns (116) . TheVpatterns may have steps 
containing pools of independently selectable Ytems from which random 
selections are made. A pse/ido-random number generator (142) is employed 
to perform the random selections during processing, where the random 
sequences thereby generated have the ability to\be repeated at specific 
musical intervals. / \ 

French Abstract 

L'invention concerne la^ collecte d ! une serie de notes initiales (104) a 
partir d 1 une source d 1 entree de matiere musicale (101) en temps reel 
telle qu'un clavier ou un sequenceur reproduisant des donnees musicales; 
ou alors 1' extraction de cette serie de notes initiales de donnees 
musicales mises en memoire (122). On peut modifier la serie de notes 
initiales pour creer des variations sur les notes initiales grace a 
plusieurs operations mathematiques . La serie de notes modifiees obtenue 
(110) ou d'autres donnees mises en memoire sont lues en fonction d'une ou 
de plusieurs configurations (116) . Les configurations peuvent comporter 
des phases comprenant des groupes d 1 articles pouvant etre selectionnes au 
hasard et a partir desquels on procede a des selections au hasard. On 
utilise un generateur de nombres pseudo-aleatoires (142) pour effectuer 
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Abstract: The unicity distance of a cascade of random ciphers, with 
respect to known plaintext attack, is shown to be the sum of the key 
lengths. At time-space trade-off for the exhaustive cracking of a cascade 
of ciphers is shown. The structure of the set of permutations realized by a 
cascade is studied; it is shown that only 1. 2**k exhaustive experiments 
are necessary to determine the behavior of a cascade of 1 stages, each 
having k key bits, . It is concluded that the cascade of random ciphers 
is not a random cipher. Yet, it is shown that, with probability, the number 
of permutations realizable by a cascade of 1 random ciphers, each having k 
key bits / is 2**l**k. Next , it is shown that two stages are not worse 
than one, by a simple reduction of the cracking problem of any of the 
stages to the cracking problem of the cascade. Finally, it is shown that 
proving a nonpolynomial lower bound on the cracking problem of long 
cascades is a hard task, since such a bound implies that P NOT-EQUAL NP. 
(Author abstract) 7 refs. 

Descriptors: ^CRYPTOGRAPHY; DATA PROCESSING — Security of Data 

Identifiers: CASCADE CIPHERS; DATA ENCRYPTION; RANDOM CIPHERS; UNICITY 
DISTANCE 

Classification Codes: 

723 (Computer Software) 

72 (COMPUTERS & DATA PROCESSING) 



18/5/2 (Item 1 from file: 35) 

DIALOG (R) File 35 : Dis sertation Abs Online 

(c) 2004 ProQuest Inf o&Learning . All rts. reserv. 



ability of/ marine cylinder lubricants 



1V( 



Jine: 



rsity (0235) 

TRACTS INTERNATIONAL. 

ING, MARINE AND OCEAN 



01741010 ORDER NO: AADAA-I99688 
A visual study of acid-neutrali 

Author: Wu, Rong Chang 

Degree: Ph.D. 

Year: 1999 

Corporate Source/Institution: Tulane 
Chairman: Kyriakos D. Papadopoulos 
Source: VOLUME 61/04-B OF DISSERTATION 

PAGE 2079. 130 PAGES 
Descriptors: ENGINEERING, CHEMICAL ; EN 
Descriptor Codes: 0542; 0547 

The combustion of high level sulfur-dontainirito (2–5%) fuels 
generates sulfuric acid in marine diesel engines. Iri the absence of any 
control, sulfuric acid attacks metal surfifaces and is\the prime cause of 
ring and cylinder bore wear. One of the major requirements of the marine 
cylinder lubricant (MCL) is therefore their ability to\ieutralize the 
sulfuric acid and any other acids formed 
MCL's additives for acid neutralization are basically oil^ssoluble Group-II 
basic metal (calcium or magnesium) overbdsed sulfonates, or\phenates . Those 
overbased detergents are in the form of reverse micelles witK a calcium 
carbonate core, which is stabilized by v an outer alkyl/aryl sulfonic acid 
shell. 

In this study, a capillary video-microscopy technique was used to 
develop an experimental protocol for ranking the ability of marine cylinder 
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Document Type: Patent \ / 

Record Type: Abstract \ / 

Journal Announcement: 2100 X 

#. A 

An improved electronic translator wherein An aVrangement of words in a 
source language is retrieved from a memory ^ontarned therein along with 
atranslation of said arrangement of words A.n a target language different 
from said source language, said translator comprising: Input means for 
serially entering two or more key words thoughtNby a user to be 
contained within at least one stored aiTrangement of words in said source 
language; Memory means for storing a plurality of stored arrangements of 
words in said source language and an/associated plurality of stored 
arrangement of words in said target/language, each one or\said plurality of 
stored arrangements of words in saad source language being^ssociated with 
its translation as a stored arrangement of words in said target language; 
Access means, responsive to saica input means , for searching* thev plurality 
of stored arrangements of word/ in said source language to locauk a word 
therein corresponding to a said key word; Termination means, responsive to 
the completed entry of each /ne of said two or more key words kW said 
input means, for indicating that said entry of each said key word\- s 
completed and for immediately enabling said access means to search said 
plurality of stored arrangements of words to identify a word therein \ 
corresponding to said key/word before a succeeding said key word is \ 
entered; Said access means, upon^fentry of two or more key words \ 
contained within said memory means as determined by the search of saici 
access means enabled by said translation means, recalling from said memory 
means a said stored arrangement of words in said source language contai na 
said two or more key words entered into said input means as a selected 
source arrangement and recalling its said translation as selected 
translation arrangement, and means, responsive to the recall of said 
selected source arrangement and said selected translation sentence by said 
access means, for indicating said selected source arrangement and said 
selected translation ' arrangement to the user of said translator. 

Descriptors: Electronic information systems; Information retrieval; 
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Language: English Document Type: Journal Paper (JP) 
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Abstract: The Data Encryption Standard (DES) is an encryption cipher 
defined and endorsed by the US government in 1977 as an official federal 
standard. DES has been extensively studied since its inception and is both 
the most well known and most widely used cryptosystem in the world. DES was 
intended to provide strong encryption for the government ! s sensitive - but. 
unclassified information. In December 1998, DES will be retired as a 
federal cryptographic standard. Its retirement is coming after more than 23 
years of illustrious use. Being over 23 years old, DES is ancient in the 
world of computing. At the technical level, DES has a 64-bit block size and 
uses a 56- bit key during encryption. The National Institute for 

Standards and Technology (NIST) has recertified DES as an official US 
government encryption standard on numerous occasions. This recertif ication 
occurs every five years. DES^was last recertified in 1993 and NIST has 
indicated that it will not recertify DES. For those companies that desire 
a common cryptographic encryption algorithm, the next few years will be 
difficult and strained. When DES was reaffirmed for the final time in 1993, 
the plans for its successor should have been at an advanced stage. It was 
reckless of NIST to wait until September 1997 to post the announcement for 
the AES in the Federal Register. This is a classic case of standards not 
keeping up with the times. Companies will now have to look at their 
security and cryptographic infrastructure and perform a serious risk 
analysis. (0 Refs) 
Subfile: B C 
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Abstract: The unicity distance of a cascade of random ciphers, with 
respect to known plaintext attack, is shown to be the sum of the key 
lengths. A time-space trade-off for the exhaustive cracking of a cascade of 
ciphers is shown. The structure of the set of permutations realized by a 
cascade is studied; it is shown ^iat only 1.2/sup k/ exhaustive experiments 
are necessary to determine the behavior of a cascade of 1 stages, each 
having k key bits . It is concluded that the cascade of random ciphers 
is not a random cipher. Yet, it is shown that, with high probability, the 
number of permutations realizable by a cascade of 1 random ciphers, each 
having k key bits , is 2/sup lk/. Next , it is shown that two stages 
are not worse than one, by a simple reduction of the cracking problem of 
any of the stages to the cracking problem of the cascade. Finally, it is 
shown that proving a nonpolynomial lower bound on the cracking problem of 



long cascades is a hard task, since such a bound implies that P not=NP, (7 
Refs) 
Subfile: B C 

Descriptors: codes; cryptography 

Identifiers: random cipher cracking; data encryption; security; cascade 
ciphers; unicity distance; plaintext attack; key lengths; time-space 
trade-off; permutations ; exhaustive experiments; key bits ; 
nonpolynomial lower bound 
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Author Affiliation: Dept. of Computer Sci., Technion-Israel Inst, of 
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Conference Title: Advances in Cryptology. Proceedings of Crypto 83 p. 
43-50 

Editor(s): Chaum, D. 

Publisher: Plenum, New York, NY, USA 

Publication Date: 1984 Country of Publication: USA xii+395 pp. 
ISBN: 0 306 41637 9 

Conference Sponsor: Int. Assoc. Cryptologic Res 

Conference Date: 21-24 Aug. 1983 Conference Location: Santa Barbara, 
CA, USA 

Language: English Document Type: Conference Paper (PA) 
Treatment: Theoretical (T) 

Abstract: The unicity distance of a cascade of random ciphers, w.r.t. 
known plaintext attack is shown to be the sum of the key lengths. A 
time-space trade-off for the exhaustive cracking of a cascade of ciphers is 
shown. The structure of the set of permutations realized by a cascade is 
studied; it is shown that only l*2/sup k/ exhaustive experiments are 
necessary to determine the behaviour of a cascade of 1 stages, each 
having k key bits . It is concluded that the cascade of random ciphers 
is not a random cipher. Yet, it?' is shown that, with high probability, the 
number of permutations realizable by a cascade of 1 random ciphers, each 
having k key bits , is 2/sup lk/. Next , it is shown that two stages 
are not worse than one, by a simple reduction of the cracking problem of 
any of the stages to the cracking problem of the cascade. Finally, it is 
shown that proving a nonpolynomial lower bound on the cracking problem of 
long cascades is a hard task, since such a bound implies that P not=NP. (6 
Refs) 
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Crypto proposal faces long journey — Rijndael algorithm needs 
conformance, interoperability tests before implementation 

Messmer, Ellen 

Network World , October 16, 2000 , vl7 n42 p53-59, 2 Page(s) 
ISSN: 0887-7661 
Languages : English 

Document Type: Articles, News & Columns 
Geographic Location: United States 

Reports that the Rijndael 128-bit encryption algorithm selected by the 



United States National Institute of Standards and Technology (NIST) faces 
conformance and interoperability tests before implementation. Explains that 
conformance tests would ensure that vendors implemented Rijndael properly. 
Mentions that next year, Rijndael will be officially designated the 
Advanced Encryption Standard (AES) to replace the 56-bit Data Encryption 
Standard (DES) . Indicates that Rijndael can be used as 128-bit, 192-bit, 
or 256- bit key cryptography. Adds that DES can be cracked with 

sufficient processing power. Points out that a stronger DES called 
TripleDES will remain a government standard for the foreseeable future. 
Presents predictions that Rijndael will not appear in products for a while.- 
Includes a sidebar. (MEM) 

Descriptors: Encryption; Algorithm; Security; Federal Government; 
Testing; Interoperability; Standards 
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04731003 JICST ACCESSION N0MBER: 01A0043405 FILE SEGMENT: JICST-E 
Psychological Characteristics \>f Unsuccessful Pilot Trainees. 

MATSUNAGA NAOKI (1); ASUKATA ICHIRO (1); KABASHIMA TSUKASA (1); SHIRAHAMA 

KYOKO ( 1 ) 
(1) Japan Airlines Co., Ltd. 

Uchu Koku Kankyo Igaku ( Japanese Journal of Aerospace and Environmental 

Medicine), 2000, VOL. 37, NO. 1, PAGE. 1-7, FIG. 5, TBL. 1, /RpF. 11 
JOURNAL NUMBER: Y0811AAC ISSN NO : \)3 87 -072 3 
UNIVERSAL DECIMAL CLASSIFICATION: 61+ 

LANGUAGE: Japanese COUNTRY OF iH^BLI CATION: Japan 

DOCUMENT TYPE: Journal 
ARTICLE TYPE: Original paper 
MEDIA TYPE: Printed Publication 

ABSTRACT: Some pilot trainees can not pass flight^xami nations and are 

obliged to give up their flight training became of their insufficient 
technical skills. We investigated their results o^iv group Rorschach test 
(a maultiple-choice test with ink blots wrrzch are similar to those for 
face-to-face Rorschach test) . Subjects were 20 male p\lot trainees 
(F(fail) group: mean age 22. #.+-.1.5 yea/rs) who were obliged to give up 
their flight trainings between 1985 ancr 1996 because of \heir 
insufficient technical skills. The control group was madeyip of 125 
male pilot trainees (P(pass) group: mean age 22. 4.+-. 1.7 yaars) who 
were the successful classmates of the unsuccessful trainees\ We 
investigated the differences of the results of group Rorschach test 
given for employment screening be/tween the two groups. All results of 
the scores in group Rorschach test were within normal limits ftoth in P 
group and F group. There, however, were following significant 
differences between the two groups: (1) F group showed more Vey 
-responses than P group (F group: 4.9.+-.2.1 P group: 3 . 4 . +- . 2 , 
p<0.01). (2) F group showed more k responses than P group (F groVip: 
0.2.+-. 0.4 P -group: 0.02.+— /o.l, p<0.01). (3) P group -showed mor\ FC 1 
responses than F group (F group: 1 . 4 . +- . 1 . 0 P group: 2.2.+-. 1.2, 
p<0.01). (4) F group showecl more cF responses than P group (F groi 
1.6.+-.1.2 P group: 1.0.+-.0.9, p<0.05). (5) P group showed higher\form 
level than F group (F group: 120 . 6 . +- . 15 . 8 P group: 128 . 2 . +- . 12 . 6, ' 
p<0.05). The pilot trai/nees in F group were suggested to have 
vulnerability to be nervous and anxious in an inexperienced situatic , 
to decline their ability to cope objectively and effectively with a new 
situation, and to increase d^feire for dependence upon others, (author 
abst.) / 

DESCRIPTORS: human (primates ) ; aerospace medicine; operation ( transportation) 
; crew; personality^ test ; projective technique (psychology ) ; man; 
aptitude test; mental manifestation; comparative test; education and 
training 

BROADER DESCRIPTORS: medicine; natural science; science; operation and 
driving; job classified employee; worker; psychological test; 
psychometry; psychiatric care; human ( sociology) ; maleness; sex; 
inspection; symptom; disease; test 
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Every company developed each next -generation code technology for 
electronic commercial transaction, to propose it to ISO/IEC. 
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Denshi Joho Tsushin Gakkaishi ( Journal of the Institute of Electronics, 

Information and Communication Engineers), 2000, VOL. 83, NO. 7, 
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JOURNAL NUMBER: F0019ADO ISSN^IO: 0913-5693 
UNIVERSAL DECIMAL CLASSIFICATION: 621.391.037.3 
LANGUAGE: Japanese COUNTRY OF PUBLICATION: Japan 

DOCUMENT TYPE: Journal 
ARTICLE TYPE: Commentary 
MEDIA TYPE: Printed Publication 

ABSTRACT: Every company in Japan developed each next -generation code 
technology adopted by electronic commercial transaction, electronic 
government, and so forth using internet, to propose it to ISO/IEC of 
the international standardization organization. Here were introduced on 
the following code systems: 1) MARS (a system developed for next 
term common key-code standard AESin U.S.A. by IBM); 2) CIPHERUNICORN-A 
(.a 12.8 bit block code developed by .NEC, key selectable from 128, 192 
and 256 bits, and characteristic of false key method and of use of 
stirring equation) ; 3) MISTY (total notation of 64 bit block code with 
128 bit key -length developed by the Mitsubishi Electric Co.); 4) 
Hierocrypt (a 12 8 bit block code developed by Toshiba Corp., and 
characteristic of insert type SPN structure) ; 5) MULTI-S01 (a common 
key code technology developed by Hitachi Corp., and possible to detect 
a non-correct manipulation by inspecting redundant code preliminarily 
shared on encoding) ; 6) Came^ia (a 128 bit block next -generation 
common key code colaborately developed by NTT and Mitsubishi Electric 
Co., which supports three kinds of key-length such as 128, 192 and 256 
bits); and, EPOC and PSEC (opened key system developed by NTT, and the 
former lays a base on a prime factor factorization problem, and the 
latter lays a base on a dispersion logarithmic problem) . 

DESCRIPTORS: cryptogram; cryptography key; public key cryptography; data 
protection; computer security; ISO; IEC standard; transaction; 
coding ( signal) 

IDENTIFIERS: information security 

BROADER DESCRIPTORS: protection; security; guarantee; international 
organization; international standard; standard ( specification ); 
standard; modification; signal processing; treatment . . 
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Oracle Ships Encryption Software-Product Secures Data On SQL*Net 2 . 1 

Network Going To Non-Oracle Databases (Product Briefs) 
Dan Richman 

OPEN SYSTEMS TODAY, 1995, n 167, PG29 
PUBLICATION DATE: 950123 

JOURNAL CODE: OST LANGUAGE: English 

RECORD TYPE: Fulltext 

SECTION HEADING: Databases & Development Tools 

WORD COUNT: 324 

TEXT: 

Oracle has begun shipping software it said encrypts information 
passing over a SQL*Net 2.1 network, even if the information is directed to 
non-Oracle databases or uses multiple network protocols. 

software uses the RC4 algorithm, which Oracle has licensed from 
RSA Data Security, Redwood Shores, Calif. The next version of Secure 
Network Services (1.1), due out by April 1, will offer a choice of... 

...widely used and offers more security, using a 56-bit key as compared to 
RC4's 40- bit key . But it imposes a vv significantly greater 1 1 
performance penalty, Jarvis said. 

Secure Network Services doesn't decrypt data when it passes through 
Oracle. . . 



20/5, K/5 (Item 1 from file: 275) 

DIALOG (R) File 275: Gale Group Computer' DB (TM) 
(c) 2004 The Gale Group. All rts*;,; reserv. 

01824749 SUPPLIER NUMBER: 17208457 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Netscape Encrypted Data Cracked. 

Newsbytes, pNEW08180023 
August 18, 1995 

LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 679 LINE COUNT: 00056 

FILE SEGMENT: NW File 649 

... the financial data in the messages using 56-bit keys. Siino 

explained, "You can export over 4 0- bit keys for a .specific 
application." The new system should be available early next year. 

Many companies working on secure transaction systems hope the much 
more secure 128-bit code version. . . 
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Practical minimal perfect hash functions for large databases, (time and * 
space saving program development techniques) (Technical) 

Fox, Edward A.; Heath, Lenwood S.; Chen, Qi Fan; Daoud, Amjad M. 
Communications of the ACM, v35, nl, pl05(17) 
Jan, 1992 
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ABSTRACT: Hash functions are used in artificial intelligence, data 
structures, data base management, file processing and information retrieval 
and other applications where data is » accessed based on the value of a key. 



Research is presented on improving current hashing practices to optimize 
use of time and space using a minimal perfect hash function (MPHF) whenever 
possible. An algorithm designed to search for MPHFs even for large static 
keys sets of over one million keys has been developed and its use is 
demonstrated. Expected uses for the algorithm include improving access to 
CD-ROM data as well as fast access to lexicons built from machine-readable 
dictionaries. The system automatically rebuilds a new MPHF when enough 
changes have been made to the data to warrant it. 
SPECIAL FEATURES: illustration; table; chart 

DESCRIPTORS: Program Development Techniques; DBMS; Hashing functions; 

Algorithm Complexity 
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... 2 to require as few bits as possible. The experiments indicated by 

these rows were conducted as follows : Lower and lower bits/key values 
were tried until Algorithm 2 failed to find an MPHF consistently. . . 

...time for those runs are reported in Table 7. The run time for n = 262144 
is anomalous, indicating that bits / key can actually be pushed lower. 
Algorithm 2 is also capable of running efficiently using external 

TABLE 6 . . . 
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Specifying an electronic mail system with HP-SL. (specification language) 

(includes related article on the specification of state in HP-SL) 

(Technical) 

Goldsack, Patrick C; Rush, Tony W. 
Hewlett-Packard Journal, v42, n5, ;; 'p32(8) 
Dec, 1991 

DOCUMENT TYPE: Technical ISSN: 0018-1153 LANGUAGE: ENGLISH 
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WORD COUNT: 5747 LINE COUNT: 00518 

ABSTRACT: HP Specification Language (SL) formal notations aid in 
developing a simple electronic mail (E-mail) system by making the user deal 
with system behavior issues, letting the user reason out the 
specifications, clarifying the system and providing unambiguous notation of 
behavior. The E-mail system presented has registered users, each with an in 
tray, an out tray and a pending tray. The users can read and delete 
messages from their in tray, compose messages in their pending tray and 
send messages from their out tray to another user's in tray. HP-SL provides 
the language models for users, messages and trays and deals with the 
operations involved. The problems with this model include its operational 
limitations, its lack of concurrency handling and its inability to deal 
with an unreliable communication medium. However, the use of the formal 
HP-SL in refinement shows that an abstract specification of an entire 
system, followed by a precise specification of one or two subsystems, is 
valuable. 

DESCRIPTORS: E-Mail; Formal Languages; Specifications; Program Logic; 

System Design 
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practice for whole systems (it takes too much time) but an abstract 
specification of a whole system, followed by detailed specifications of 
one or more key subsystems is practical and useful. As with reasoning 
about system properties, reasoning about the correctness of refinement... 
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Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 986 
TEXT: 

WASHINGTON, DC, U.S.A., 1999 NOV 12 (NB) — SETI@home aims to tackle one of 
the biggest computing problems in history, so big that a $900 home computer 
may wind up solving it — if a $100 cell phone doesn't get there first. The 
Search for Extraterrestrial Intelligence at Home is the highest- profile 
experiment yet in "distributed computing. " This approach breaks gargantuan 
problems into smaller segments that can be attacked with personal 
computers, then uses the Internet to send out these slices and collect the 
results. It's a rough equivalent of Tom Sawyer getting every other boy in 
town to whitewash the fence, one plank at a time. So far, more than 1.4 
million people in 224 countries have downloaded the SETI@home software and 
used it to sift through the 35 gigabytes of raw data that the Arecibo 
Observatory radio telescope in Puerto Rico collects daily. This free 
program, available for Windows, Mac and Unix systems, downloads a 
350-kilobyte slice of the information recorded by Arecibo ' s 1, 000-f oot-wide 
dish. Then, whenever the computer is idle, the program analyzes this 
data — a "work unit" — for unusual signal patterns, displaying the results as 
a "Star Trek"-ish screen saver. When finished, the program sends the 
information back to the SETI servers and downloads more data. Sifting 
through the billions and billions of bits of data that Arecibo collects is 
a monumental task, but on the other hand there's the chance, however 
slight, that your rusty old PC might be the one that first detects a 
signal. "The search for extraterrestrial intelligence is the biggest 
question that faces us, outside of how the universe began," said David P. 
Anderson, project director of SETI@home and a former professor at .the 
University of California at Berkeley. "(It's) something that attracts a lot 
of people." That altruistic pursuit, however, isn't the only reason people 
are flocking to SETI@home. The site has also attracted what Anderson calls 
"computer hot-rod guys, " who compete to see whose machines can process 
information the fastest. SETI@home keeps statistics on individual users and 
groups of users, and the results are posted in a top-1,000 list. It's a 
subculture all its own, and SETI@home isn't the only site where this online 
"sport" is being played. On Distributed. net , more than 60,000 computers 
are working together to win a code-breaking contest sponsored by RSA Data 
Security. The Bedford, Mass. -based firm, in an effort to prove the 
ineffectiveness of current, government-sanctioned encryption methods, is 
offering $10,000 to the first group that cracks a "64- bit " key (the 
number indicates the complexity of the equation behind that key) . Like 
SETI@home, Distributed.net keeps track of how much data different teams of 
users are processing and ranks them accordingly. As the competition heats 
up, different groups with different allegiances vie for the top ranking. 
"People were joining together and forming teams even before we formalized 
the process on our server, " said David McNett, president and co-founder of 
Distributed.net. "We have teams I never would have guessed would have an 
organized interest in our project: school teams, company teams, 
bird-watcher teams . . . anything you can imagine." Colin Hildinger, for 
instance, runs Team Warped, made up of people who use and support the IBM 
OS/2 operating system. For dedicated computer aficionados, the choice of an 
operating system is a very personal expression of who they are — hence the 
attempts to display its prowess. At Distributed.net, even the long- 
forgotten Amiga platform has a team competing for the prize. "We know that 
the odds of our team winning aren't that great," Hildinger wrote in an 
e-mail. "Currently the odds are about one in 100 that Team Warped will find 
the key, and the odds that it will actually be an OS/2 machine are much 
worse. But every OS/2 user involved would love to have the name OS/2 
somehow associated with winning one of these contests." In the meantime, 
•one of Hildinger 's main concerns is that his team stay ahead of Team Win32, 
the Windows group. Nobody, it seems, wants to see Microsoft win—online or 



in the courts. But none of these teams is likely to crack this problem any 
time soon, as only 15 percent of the possible solutions have been checked 
since the contest began Oct. 22,%997. Hilclinger noted that this could be a 
problem: "When the current project looks like it will drag on for years and 
future projects are vaporware, it's hard to get motivated to do anything." 
The site does have other computing projects on the horizon, however, 
including a variety of cryptological and mathematical problems. More 
interesting, but less likely, is the possibility that the rendered 
animation for the next "Toy Story" movie could be done over the Internet. 
McNett said the big obstacle there isn't technology, but 
copyright-protection issues. As for the SETI@home project, Anderson 
predicted it would be completed within two years, assuming no signals from 
extraterrestrials are found before then. After that, the group plans to 
start analyzing recordings from a telescope in Australia, covering radio 
sources in the Southern Hemisphere sky. And faster DSL and cable-modem ■ 
connections could make many other projects possible. "There may be 
approaches to finding a cure for cancer that are computational," Anderson 
said. "We could use computers to simulate the way that drugs might work. 
Another possible project involves the simulation the ecology of the planet, 
predicting global warming. A lot of areas of science are starting to 
replace laboratories with computers." And it need not just be traditional 
computers doing the work. Already, Anderson has been in contact with 
someone interested in running SET3@home on his Nokia cellular phone. He 
said, "They're going to be putting computers into everything, so you might 
someday have your toaster oven doing scientific projects while it isn't in 
use." Reported By Newsbytes.com, http://www.newsbytes.com . 
(19991112/WIRES ONLINE/) 
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...current, government-sanctioned encryption methods, is offering $10,000 
to the first group that cracks a "64- bit " key (the number indicates 
the complexity of the equation behind that key) . Like SETIdhome, 
Distributed.net keeps track of how... and mathematical problems. More 
interesting, but less likely, is the possibility that the rendered 
animation for the next "Toy Story" movie could be done over the Internet. 
McNett said the big obstacle there isn't... 
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TOKYO, JAPAN, 1995 AUG 18 (NB) — Two computer users have managed to break 
Netscape's Secure Sockets Layer (SSL) encryption code in response to a 
challenge posted to the Internet. But far from scare people away from using 
the system for online purchases, the results could reassure people of the 
safety. 

In mid July Hal Finney, a US computer user, posted data in an Internet 
message that he recorded when he'^sent an order, containing a fake name and 
credit card details, to Netscape's own computer. Setting a task for the 
hacking community, he wrote, "The challenge is to break the encryption and 
recover the name and address info I entered in the form and sent securely 
to Netscape . " 



Early this week, news came from Damien Doligez, a French computer 
user, that he had cracked the coc^re and revealed the contents of the 
message. Several hours later a message from an American team also claimed 
the same feat, actually cracking it two hours earlier than Doligez. 

While the results look damaging on the surface, Netscape, and Doligez, 
pointed out the amount of computer processing power needed to hack just one 
message and the difficulty in repeating the process. 

Roseanne Siino of Netscape told Newsbytes, "The real issue is whether 
this compromises security on the net. He used 120 computers for 8 days just 
to crack one message." Siino points out that to break into another message 
would require another eight days at the same 120 workstations and 2 
parallel computers. 

In home computer terms, Doligez guesses a network of about 80 Intel 
Pentium-based machines would be equivalent to the system he. had access to 
via his workplace, INRIA in Paris, and computers an Ecole Polytechnique and 
ENS. 

Netscape estimates the total cost of this computing time at around 
$10,000, meaning there are many more economical ways of getting credit 
cards numbers than hacking into Netscape SSL messages. 

Doligez agrees, writing on his home page: "The technical implications 
are almost zero. Everybody who understands the technical details knew 
perfectly well that this was do-aible and even easy. You have to understand 
what happened exactly. I did not break SSL itself. I did only break one SSL 
session that used the weakest algorithm available in SSL. If I want to 
break another session, it will cost another 8 days of all my machines." 

The vulnerability of the encryption system is shown by its 
international use. The coding system available via Netscape software from 
the Internet makes use of a 40-bit encryption key. A stronger version, 
using a 128-bit key, is available to US citizens but restricted from export 
outside the United States by government regulations. 

Netscape's Siino explained the US government allows export of the 
lower security version "because they can break it." 

There are some hopes that this demonstration will help persuade the US 
government to lift export restrictions on some harder-to-crack versions, of 
the code . 

Netscape is currently developing a new Secure Courier code which just 
encrypts the financial data in the messages using 56-bit keys. Siino 
explained, "You can export over 4 0- bit keys for a specific 
application." The new system should be available early next year. 

Many companies working on secure transaction systems hope the much 
more secure 128-bit code version of the system will be available for export 
eventually. This is said to be almost unbreakable, requiring a trillion 
times more processing power to crack than the 40-bit version. 

Internet users can view a copy of the original challenge, access 
Doligez' s home page with details of his result, get copies of the program 
used to crack the code and read Netscape's response to the news through a 
special section at Netscape, 

http : / /home . netscape . com/ newsref /std/key_challenge . html 

(Martyn Williams/19950818/Press contacts : Roseanne Siino, Netscape, 
+1-415-528-2619 , Internet email roseanne@netscape.com; Damien Doligez, 
Internet email damien.doligez@inria.fr ; Hal Finney, Internet email 
hf inney@shell . portal . com 
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